$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: BdOXZDnZR1JpfxKcDQVTzgIwmetS34QvN96OYxJhksA= Subject key identifier: 3B:82:5E:6C:A0:40:2A:D3:0B:84:7E:5F:A3:B3:4B:9B:43:6B:55:8E Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 7A4638083A0716E7C8EF2FE3EE4BE942973A2B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 0436 Signing time: Sat 18 May 2024 15:51:42 +0000 Manifest this update: Sat 18 May 2024 15:46:42 +0000 Manifest next update: Tue 21 May 2024 22:11:42 +0000 Files and hashes: 1: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: rPBt0/zAR0X6JxQUv/6ZHezt+At/QGJ2qobioijm6Nw=) 2: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: bMvf4ZsbMg1BaWf0Ci2r4aAqgr0i6VQxloBEC+KJhhs=) 3: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: SvEdMZfuVXSAy/9H733gyul6CzLvqEUOtx6XN2d6vVE=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: e8Wn2zINbJR31vv8FwG9aLMHt5eZHhYeYPrN9Uh0ur8=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: xaPMqilG/H32AYqyR6qjUobIorMJeBrohcDCoufUrvE=) 6: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: JDz4YCsJRvpIU9OhO7nwFjJL5dbeR+zjwezgUYYz8bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:46:38:08:3a:07:16:e7:c8:ef:2f:e3:ee:4b:e9:42:97:3a:2b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: May 18 15:46:42 2024 GMT Not After : May 21 22:11:42 2024 GMT Subject: CN=3B825E6CA0402AD30B847E5FA3B34B9B436B558E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:2c:3c:ed:f9:55:41:2e:d2:ca:b3:39:d0: 35:aa:d8:40:bf:a1:06:e9:d9:9d:05:e1:03:69:48: 4f:2e:6c:e5:58:6b:7c:02:05:79:4c:8e:67:ad:cf: 6e:1f:8e:8f:d7:d0:f7:7c:d2:2a:63:de:b6:4a:18: d1:8d:2e:bb:ef:b6:c7:30:5f:49:a4:1b:cb:c1:f4: 00:1d:d9:bd:3e:bb:6f:69:cd:97:93:0c:25:6a:40: 35:a3:a5:04:31:c1:4b:53:6b:94:2f:24:da:77:24: a6:d0:23:07:72:9f:dc:b0:7d:70:b6:09:2f:df:48: c3:2f:39:e4:ee:7c:2f:c8:e0:10:d9:05:d9:0b:c7: f2:ca:84:2b:22:b5:95:8c:cd:ba:73:be:cb:ee:f5: 1c:1c:29:28:07:b3:06:52:56:40:c0:a3:22:5d:a4: 9f:fa:29:38:9b:77:16:d3:98:ee:5b:e5:11:19:7a: 85:97:4f:56:bf:3f:f5:f8:4b:04:90:ef:16:ea:ea: 0b:1f:1a:05:0d:18:50:ca:80:c6:32:23:d9:df:ac: 10:e4:41:6c:83:30:31:b5:4a:8a:b0:71:4e:e2:05: b9:c2:52:93:34:5d:ea:68:bf:34:17:a0:e3:c8:bd: 6e:2a:c5:31:4a:e9:86:6a:ab:33:9a:f0:11:81:11: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:5E:6C:A0:40:2A:D3:0B:84:7E:5F:A3:B3:4B:9B:43:6B:55:8E X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:df:63:46:a4:3e:19:a9:54:da:7e:24:28:2f:9b:c0:45:62: 77:e8:d0:35:62:39:ce:85:bd:e1:8c:b1:b5:ae:3e:6c:35:dc: c9:6a:49:7e:77:04:44:52:58:08:b3:d5:0c:d8:dd:9b:e1:95: f5:29:c8:f7:0a:07:da:d4:9d:de:dd:6f:d3:10:6c:33:e5:9c: 4e:90:42:f8:38:83:55:7f:b8:78:a1:31:1e:28:ef:56:af:bc: f0:fd:c5:42:47:9c:a8:e0:c3:75:2d:4f:99:a2:07:15:0d:08: 53:59:5f:88:10:ce:a5:6b:dd:2e:e6:cc:c8:2f:bf:64:56:e4: bb:88:1c:27:39:b9:03:0d:f9:ba:60:cf:b0:70:8b:4d:e0:dd: 18:5e:01:ac:d9:6b:63:81:c9:ba:86:26:3b:2e:b4:c6:f9:27: 31:85:41:ad:4b:93:d1:21:90:43:fb:83:21:ee:e6:63:73:96: aa:8f:e7:6a:fa:22:f8:81:86:67:5c:82:ed:14:3a:b2:29:e6: d0:f2:61:13:c5:1a:77:2c:ca:bd:e4:44:7a:ef:a5:a4:a0:72: d3:e8:28:56:fa:6a:0f:5c:e1:d7:8a:b6:48:9a:4c:23:c3:7b: 31:20:1c:ec:23:f3:7a:ce:7d:ab:ea:db:72:d9:dc:db:0e:7e: 08:16:bc:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekY4CDoHFufI7y/j7kvpQpc6K5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNDA1MTgxNTQ2NDJaFw0yNDA1MjEyMjExNDJaMDMxMTAvBgNV BAMTKDNCODI1RTZDQTA0MDJBRDMwQjg0N0U1RkEzQjM0QjlCNDM2QjU1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pSw87flVQS7SyrM50DWq2EC/ oQbp2Z0F4QNpSE8ubOVYa3wCBXlMjmetz24fjo/X0Pd80ipj3rZKGNGNLrvvtscw X0mkG8vB9AAd2b0+u29pzZeTDCVqQDWjpQQxwUtTa5QvJNp3JKbQIwdyn9ywfXC2 CS/fSMMvOeTufC/I4BDZBdkLx/LKhCsitZWMzbpzvsvu9RwcKSgHswZSVkDAoyJd pJ/6KTibdxbTmO5b5REZeoWXT1a/P/X4SwSQ7xbq6gsfGgUNGFDKgMYyI9nfrBDk QWyDMDG1SoqwcU7iBbnCUpM0XepovzQXoOPIvW4qxTFK6YZqqzOa8BGBEaiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO4JebKBAKtMLhH5fo7NLm0NrVY4wHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHfY0akPhmpVNp+JCgvm8BFYnfo0DViOc6F veGMsbWuPmw13MlqSX53BERSWAiz1QzY3ZvhlfUpyPcKB9rUnd7db9MQbDPlnE6Q Qvg4g1V/uHihMR4o71avvPD9xUJHnKjgw3UtT5miBxUNCFNZX4gQzqVr3S7mzMgv v2RW5LuIHCc5uQMN+bpgz7Bwi03g3RheAazZa2OBybqGJjsutMb5JzGFQa1Lk9Eh kEP7gyHu5mNzlqqP52r6IviBhmdcgu0UOrIp5tDyYRPFGncsyr3kRHrvpaSgctPo KFb6ag9c4deKtkiaTCPDezEgHOwj83rOfavq23LZ3NsOfggWvIo= -----END CERTIFICATE-----Generated at Sat May 18 17:19:17 2024 by rpki-client on console-ams.rpki-client.org